Format: 1.8
Date: Wed, 26 Apr 2023 11:14:45 -0300
Source: git
Binary: git git-man git-doc git-cvs git-svn git-mediawiki git-email git-daemon-run git-daemon-sysvinit git-gui gitk git-el gitweb git-all
Architecture: ppc64el ppc64el_translations
Version: 1:2.17.1-1ubuntu0.18
Distribution: bionic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-ppc64el-027.buildd>
Changed-By: Leonidas Da Silva Barbosa <leo.barbosa@canonical.com>
Description:
 git        - fast, scalable, distributed revision control system
 git-all    - fast, scalable, distributed revision control system (all subpacka
 git-cvs    - fast, scalable, distributed revision control system (cvs interope
 git-daemon-run - fast, scalable, distributed revision control system (git-daemon s
 git-daemon-sysvinit - fast, scalable, distributed revision control system (git-daemon s
 git-doc    - fast, scalable, distributed revision control system (documentatio
 git-el     - fast, scalable, distributed revision control system (emacs suppor
 git-email  - fast, scalable, distributed revision control system (email add-on
 git-gui    - fast, scalable, distributed revision control system (GUI)
 git-man    - fast, scalable, distributed revision control system (manual pages
 git-mediawiki - fast, scalable, distributed revision control system (MediaWiki re
 git-svn    - fast, scalable, distributed revision control system (svn interope
 gitk       - fast, scalable, distributed revision control system (revision tre
 gitweb     - fast, scalable, distributed revision control system (web interfac
Changes:
 git (1:2.17.1-1ubuntu0.18) bionic-security; urgency=medium
 .
   * SECURITY UPDATE: Overwriting path
     - debian/patches/CVE-2023_25652_25815_29007/0022-*.patch: apply
       --reject overwriting existing .rej symlink if it exists in apply.c,
       t/t4115-apply-symlink.sh.
     - CVE-2023-25652
   * SECURITY UPDATE: Malicious placement of crafted messages
     - debian/patches/CVE-2023_25652_25815_29007/0024-*patch:
       avoid using gettext if the locale dir is not present in
       gettext.c.
     - CVE-2023-25815
   * SECURITY UPDATE: Arbitrary configuration injection
     - debian/patches/CVE-2023_25652_25815_29007/0025-*.patch: avoid
       fixed-sized buffer when renaming/deleting a section in config.c.
     - debian/patches/CVE-2023_25652_25815_29007/0026-*.patch: avoid
       integer truncation in copy_or_rename_section_in_file() in config.c.
     - debian/patches/CVE-2023_25652_25815_29007/0027-*.patch: disallow
       overly-long lines in copy_or_rename_section_in_file in config.c.
     - CVE-2023-29007
Checksums-Sha1:
 783ecce678f01b0c4f838083f415a59243e32493 49395532 git-dbgsym_2.17.1-1ubuntu0.18_ppc64el.ddeb
 6a5d5dbc2af92f5f49de82e3e994cacdccbea056 9155 git_2.17.1-1ubuntu0.18_ppc64el.buildinfo
 e1792505ca5ee3b579cb6b961e9b13114c57e47f 5401776 git_2.17.1-1ubuntu0.18_ppc64el.deb
 fbc20c4140c2823cc38131ab5cdab61b8e2115c4 3381532 git_2.17.1-1ubuntu0.18_ppc64el_translations.tar.gz
Checksums-Sha256:
 36f508f17a5c4be420c9dfab1e7cd5f7b7567d0728be81291ef060c6a5472334 49395532 git-dbgsym_2.17.1-1ubuntu0.18_ppc64el.ddeb
 67f6bfa91fdd105d136949787a7392ff14291bc3dd88ef797cf3c3e1a7da04b5 9155 git_2.17.1-1ubuntu0.18_ppc64el.buildinfo
 0e2d34431a74bf8efe00330e39078d1c9faf621f7863d483807f9df69caefb7b 5401776 git_2.17.1-1ubuntu0.18_ppc64el.deb
 4b7360554fc1438090740188b2dfb925d5c7919f2fe8eed64532f10874b75b5b 3381532 git_2.17.1-1ubuntu0.18_ppc64el_translations.tar.gz
Files:
 7cadb390476351f29f215968d5c63a81 49395532 debug optional git-dbgsym_2.17.1-1ubuntu0.18_ppc64el.ddeb
 6030e32d369dd523fc09a23b17faf590 9155 vcs optional git_2.17.1-1ubuntu0.18_ppc64el.buildinfo
 e8963c2ef23a4ddd449e870e11f3bb33 5401776 vcs optional git_2.17.1-1ubuntu0.18_ppc64el.deb
 cbc04d5842ae29e1323f30186d53a5a4 3381532 raw-translations - git_2.17.1-1ubuntu0.18_ppc64el_translations.tar.gz
Original-Maintainer: Gerrit Pape <pape@smarden.org>